Which type of control is designed to directly mitigate internal and external risks at the organizationwide level, furthering the achievement of many overall organizational objectives?

The chief audit executive (CAE) of a mid-sized pharmaceutical organization has operational responsibility for the regulatory compliance function. The audit committee requests an assessment of regulatory compliance. According to IIA guidance, which of the following is the CAE's best course of action?

Which of the following internal control weaknesses would an auditor most likely detect
while reviewing a flowchart that depicts the purchasing function of an organization?

An internal auditor is providing consulting services on an area he was responsible for three years ago. Part of the consulting scope covers a review of a performance measuring system that the auditor helped to develop.
What is the best course of action for the auditor to take concerning the consulting service?

A chief audit executive has reported to the board that the internal audit activity is lacking financial accounting knowledge for specific audit projects. Upon approval from the board which of the following hiring approaches is best in this situation?